CyberRota Analysis
AI-GeneratedA SQL injection vulnerability exists in the ticketing REST API, allowing authenticated non-admin users to exploit the flaw and access sensitive data within the appliance database. This poses a significant risk to data confidentiality and integrity, making it essential for organizations utilizing the affected products to prioritize remediation efforts. Security teams should focus on patching this vulnerability to prevent unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.
Related CVEs
Other vulnerabilities affecting the same vendor(s)